🏗️ SAP ECP Configuration Journal — 6-Chapter Master Framework

SAP SuccessFactors Employee Central Payroll

Configuration Journal — 6-Chapter Master Framework

Design Principle: Every chapter = 6 topics. Every topic = 6 substeps. This 6×6×6 structure maps directly to curriculum design: 6 chapters become 6 course modules, 6 topics become 6 lessons per module, 6 substeps become the 6 learning activities per lesson.

CHAPTER 1 — Foundation & System Landscape

Audience: BASIS / Technical Consultant | Phase: Prepare & Explore

1.1 System Landscape & Provisioning

1. Provision EC Payroll instance (DEV / QA / PROD) via SAP Cloud Provisioning
2. Configure SNC-based SAProuter with public IP/NAT for secure connectivity
3. Set up transport landscape (STMS) and define transport routes DEV → QA → PROD
4. Activate SAP Enterprise Extension Sets via SFW5 (e.g. HCM_LOC_CI_115, HCM_LOC_CI_114)
5. Configure General Client Settings: client role, changes & transport for client-specific objects
6. Import Best Practices configuration via STMS_IMPORT (select Ignore Non-permitted Table Class)

1.2 User Settings & SICF Service Activation

1. Enable SAP GUI Scripting via RZ11 — set sapgui/user_scripting = TRUE
2. Set decimal notation and date format per country in SU01 → Defaults tab
3. Activate NWBC services in SICF: NWBC*, webdynpro, bsp/sap/public, smart_forms
4. Activate PCC SAPUI5 apps in SICF: hrpy_cockpit2_m, hrpy_pcc2_m, hrpy_pcc_ckp_v1 (+ 15 others)
5. Activate Embedded SAP NetWeaver Gateway and register OData services via /IWFND/MAINT_SERVICE
6. Configure Clickjacking Framing Protection: activate /sap/public/bc/uics/whitelist and maintain HTTP_WHITELIST table (EntryType 30)

1.3 Identity & Authentication (SAML 2.0 / OAuth 2.0)

1. Automate SAML 2.0 setup via program RP_HRSFEC_SAML_CONFIG in SE38; verify IAS metadata import
2. Download SAML metadata from ECP (SAML2 transaction); activate /default_host/sap/public/bc/sec/saml2
3. Configure OAuth 2.0 clients EC_ADM_OAUTH and EC_ESS_OAUTH in SAML2 transaction
4. Import X.509 client certificates to ECP (STRUST) and map users via table CERTRULE or USREXTID
5. Set up Alert Subscription for certificate expiration via SSF_ALERT_CERTEXPIRE report scheduling
6. Set profile parameter icm/HTTPS/verify_client to 1 or 2 in RZ11 for mutual TLS

1.4 User Provisioning & Role Management

1. Configure template role SAP_CLDPY_ECPAY_SCIM in PFCG and assign to technical users in SU01
2. Activate SCIM service /sap/payroll/ecp/scim/v1 in SICF for Identity Provisioning (IPS)
3. Set up PFCG roles for ESS — pay statement display (HRPBS_* roles)
4. Map Employee Central users with IPS users for SAML-based SSO access
5. Configure Roles and Authorizations starting from CUST_INIT — copy all standard roles for customization
6. Assign authorization objects for PCC roles: Payroll Control Center Config, Payroll System Assignment, SAP System Configuration

1.5 OData Services & Payroll Control Center Activation

1. Activate core PCC OData services: PYD_CONT_SRV, PYC_CFG_SRV, PYC_KPI_CONFIG_1_SRV, PYC_DGN_CONFIG_1_SRV
2. Activate process OData services: PYC_PTS_CONFIG_1_SRV, PYC_PTL_CONFIG_1_SRV, PYC_PAL_MANAGE_1_SRV
3. Activate analytics OData services: PYC_CFG_ANALYTICS_SRV, PYC_MAT_MANAGE_1_SRV, PYC_TMS_CONFIG_1_SRV
4. Set system aliases for all activated OData services in /IWFND/MAINT_SERVICE
5. Configure SAP Payroll Systems in Admin Center → Manage Data → SAP System Configuration (System Name, URL)
6. Set Role Based Permissions for Payroll Unified Configuration (Edit/View for Payroll Data Maintenance Task Config)

1.6 Payroll De-clustering & Transport Management

1. Verify cluster tables registered for de-clustering in V_T77DCT_REG: AB, ARRRS, RT, CRT, BT, WPBP
2. Activate de-clustering via V_T77DCT_OPTION for HANA tables (P2RX_RT) to optimize PCC performance
3. Check imported configurations using PYC_CONF_WB: validate rule types, KPI types, process types, policy types
4. Generate Providers (one-time activity) — ensure all imported validations and KPIs show green status
5. Maintain logical transport objects: PYAD, PYTD, PYAC, PYAN, PYST, PYPT, PYPL, PYPR
6. Run Admin Transaction Report (PYT_ADMIN_TRANSACTION): configure bgRFC inbound destination and session timeout

CHAPTER 2 — Enterprise Structure & HR Master Data

Audience: Functional Consultant | Phase: Realize

2.1 HCM Enterprise Structure (Organizational Hierarchy)

1. Configure Company Code (OX02/OX15) — set country key, currency, fiscal year variant
2. Define Personnel Areas (S_AHR_61010862) — represent states/regions (e.g. 10US Florida, 11US California)
3. Define Personnel Subareas — represent departments/locations within each PA
4. Assign Personnel Areas to Company Codes (S_AHR_61010858) and set Country Grouping (Molga)
5. Specify validity of primary wage types, work schedules, pay scale groups, and time quota types per PA
6. Configure Organizational Units, Jobs, and Positions in OM (transaction PPOME)

2.2 Employee Groups, Subgroups & Payroll Groupings

1. Define Employee Groups (EG): Management, Staff, Worker, Professional, Apprentice, Expat
2. Define Employee Subgroups (ESG): Trainee → Junior → Executive → Senior → Manager → Director → C-Suite
3. Assign Employee Subgroups to Employee Groups (S_AHR_61010853)
4. Configure ES Grouping for Work Schedules — define time management grouping per EG/ESG combination
5. Configure ES Grouping for PCR (Personnel Calculation Rules) — drives payroll schema branching
6. Define Payroll Areas and assign pay frequency: Weekly / Fortnightly / Monthly / Semi-monthly

2.3 Personnel Actions & Infotype Management

1. Define Infogroups — sequence of infotypes presented during personnel actions
2. Set up Personnel Actions (PA40): Hire, Transfer, Promotion, Termination, Rehire with action codes
3. Define Reasons for Personnel Actions — mandatory for event mapping to ECP
4. Configure User Group Dependency on Menus & Infogroups (screen variants per user group)
5. Set up Number Ranges for Personnel Numbers (PA04) and configure defaults in T77S0
6. Define Contract Types, Objects on Loan, and Feature PLOGI for EC integration participation

2.4 Wage Type Catalog & Characteristics

1. Create wage type catalog by copying SAP model wage types (OH11) — never modify originals
2. Configure wage type characteristics in T512W: processing class, cumulation class, evaluation class
3. Define Processing Classes (1–99): drive schema branching (e.g. PC 01=taxation, PC 20=net pay)
4. Define Cumulation Classes: YTD totals for gross, tax, SI — used in payroll results and reporting
5. Define Evaluation Classes: grouping for remuneration statement and evaluation rules
6. Configure wage type permissibility per PS/ESG grouping in T511 and validity in T512Z

2.5 Pay Scale & Basic Pay Configuration

1. Define Pay Scale Types (S1=Staff, W1=Worker, M1=Management) via S_AHR_61016524
2. Define Pay Scale Areas — typically one per country/region
3. Define Pay Scale Groups and Levels — salary band structure mapped to job grades
4. Configure Basic Pay Infotype (IT0008): assign pay scale type, area, group, level per ESG
5. Set up Indirect Valuation for automatic salary derivation from pay scale tables (T510)
6. Configure recurring allowances (IT0014) and non-recurring payments (IT0015) wage type assignment

2.6 Benefits Configuration

1. Define Benefit Areas and assign currency; configure Features: BAREA, BENGR, BSTAT, ELIGR
2. Define Benefit Plan Types, Plan Status, and Benefit Providers (e.g. Fidelity 401k — via PE03)
3. Define Eligibility Groupings and First/Second Program Groupings for plan assignment
4. Configure Benefit Programs: link eligibility rules, plans, and contribution variants
5. Define Employee Contribution Rules and Employer Contribution Rules per plan
6. Enter wage types for benefit plans — map benefit deductions/contributions to payroll wage types

CHAPTER 3 — EC ↔ ECP Integration & Data Replication

Audience: Integration Consultant | Phase: Realize

3.1 Point-to-Point (PTP) Connection Setup

1. Run transaction HRSFEC_PTP_CONFIG to create/update RFC destinations ECP_PTP_SOAP_NNN and ECP_PTP_ODATA_NNN
2. Export X.509 certificate from ECP (STRUST) and import to EC Security Center for mutual trust
3. Perform API Ping Test to validate EC API connectivity (SOAP + OData endpoints)
4. Configure Compound Employee API Query: enable multiple actions per day, set external cost center ID
5. Configure Employment Filtering and Full Transmission Start Date for initial load scope
6. Enable Sequence Numbering for PERNR: configure PERNR switch in table T77S0

3.2 Master Data Mapping & Code Value Lists

1. Define Mapping Code Value Lists (V_T77SFEC_CVMAPC): check default mappings or define custom
2. Map EC Employment Status → ECP Employee Group/Subgroup (picklist → ERP code)
3. Configure Event Mapping: maintain code value mapping for EC event types to ERP action types (Event 70=Hire, 71=Transfer)
4. Configure Change Hire Date: check ADMIN EVSUP switch in T77S0 and Mult. Actions field in Compound API
5. Update tables V_T511 and V_T512Z before replication to prevent wage type validation errors
6. Use Mapping Check Tools (RP_HRSFEC_CHECK_PAYC_WAGETYPE in SE38) to identify and fix mapping issues

3.3 Wage Type Replication (Pay Component → IT0008/0014/0015)

1. Process Wage Types in EC Replication: entries for Country Grouping, Wage Type, and Infotype
2. Assign Recurring Payment Wage Types to Infotypes: IT0008 (Basic Pay), IT0014 (Recurring)
3. Assign Non-Recurring Payment Wage Types to Infotypes: IT0015 (Additional), IT0267 (Off-cycle)
4. Run diagnostic report RP_HRSFEC_CHECK_PAYC_WAGETYPE to validate all pay component → wage type mappings
5. Configure Push Replication in ECP: set up under Customizing > Personnel Mgmt > Integration Settings for SF ECP > PTP Replication
6. Transfer Replicated Employee Data: perform initial load via EC Data Replication Monitor

3.4 Organizational Data Mapping

1. Key Mapping of Company Code: link EC Legal Entity to ECP Company Code
2. Key Mapping of Location: link EC Location to ECP Personnel Area/Subarea
3. Check and create Jobs, Positions, Org Units using RP_HRSFEC_JOB_POS_REPL report
4. Configure Work Schedule Custom Field in EC: ensure external_code max length = 8 characters
5. Map Work Schedule: define date type and maintain code value mapping for HDAYCAT_HWORKPTTRN_TO_DAYTYPE
6. Replication of Employee Key Mapping Table — optional for FI financial integration

3.5 Time Data Integration

1. Define Customer-Specific Activities for Absence replication: IMG > Time Mgmt > Time Data > Absences
2. Define Customer-Specific Activities for Time Pay Components replication
3. Configure ECP for Time Sheet Integration via SPRO: map time types → absence types
4. Define Dummy Work Schedule for employees without a valid schedule in EC
5. Map Time Account Types → Absence Quota Types (IT2006) in V_T556U (CODE_VALUE_MAPPING)
6. Maintain Code Value Mapping for TIME_COMPENSATION_METHOD (controls leave encashment/payout)

3.6 Advanced Integration: Onboarding, MDI & Public Sector

1. Standard Integration Framework for Onboarding: configure Onboarding forms, schedule RP_HRSFEC_ONB_FORM_REPLICAT
2. Maintain code value mapping, field mapping, and node mapping for compliance forms
3. Master Data Integration (MDI): create OAuth HTTP Destination, maintain table T77SFEC_MDI_CONF
4. Public Sector: activate business functions EA-PS and PSM_GEN_BUDPER_1; enable Funds/Grants replication to IT0001/IT0027
5. Configure Filter Infotypes: select which infotypes (e.g. IT0016 Contract Elements) are included in replication
6. Monitor replication via SLG1 (object HRSFEC) and Web Service Utilities (SRTUTIL) — resolve XML validation failures

CHAPTER 4 — Payroll Engine & Time Management

Audience: Functional / Payroll Consultant | Phase: Realize

4.1 Payroll Schema & Personnel Calculation Rules (PCR)

1. Understand Payroll Schema structure: Schema → Subschema → Function → PCR → Operation → Variable
2. Copy country-specific standard schema (e.g. X000 for AU, U000 for US) — never modify SAP originals
3. Configure Schema Functions: WPBP (read WPBP), ACTIO (actions), VACAO (absences), TAXD (tax)
4. Create/modify Personnel Calculation Rules (PCRs) using PE02: define IF/THEN operations on wage types
5. Configure Retroactive Accounting: set Earliest Retro Date in Payroll Control Record (PA03)
6. Define Period Parameters and Date Modifiers: control payroll period boundaries and check dates

4.2 Payroll Control Record & Period Management

1. Define Payroll Areas and assign Period Parameter (monthly=01, weekly=04) and Date Modifier
2. Create Payroll Control Record (PA03): Released for Payroll → Exit Payroll → Correction → Released for Correction
3. Configure Pay Date Determination: define payment date offset from period end
4. Set up Off-cycle Payroll: configure reason codes, off-cycle types (bonus, correction, advance)
5. Configure Retroactive Accounting triggers: automatic retro on IT0008/IT0014 changes, manual retro forcing
6. Enable Payroll Data Maintenance Tasks in ECP via SM30 > T77S0 (Group: SFEC, Semantic: ECTSK)

4.3 Work Schedules & Time Management Setup

1. Define Work Break Schedules — fixed and variable break windows with tolerances
2. Define Daily Work Schedules (DWS): planned hours, tolerance, break schedule assignment
3. Define Period Work Schedules (PWS): weekly rotation of DWS assignments (Mon–Sun pattern)
4. Create Work Schedule Rules (WSR): link PWS + holiday calendar + ES grouping
5. Generate Work Schedules (PT23) for the required period/year
6. Define Day Types (0=work, 1=off, 2=public holiday) and Day Type Rules for special dates

4.4 Holiday Calendars & Public Holiday Configuration

1. Define Public Holiday Classes in SCAL — fixed date, floating (Easter-based), specific weekday rules
2. Create Public Holidays with correct attributes: paid/unpaid, full-day/half-day, region-specific
3. Assign Public Holidays to Holiday Calendars — create country and region-specific calendars
4. Assign Holiday Calendar to Work Schedule Rule — drives automatic non-working day recognition
5. Define Day Types for Special Days: override standard day type for specific calendar dates
6. Update floating holiday dates annually — configure Islamic (Hijri-based), Chinese Lunar, and Easter-derived holidays

4.5 Absence & Quota Management

1. Define Absence Types (IT2001): 4-character code — Annual Leave, Sick Leave, Maternity, Unpaid
2. Group PSA for Attendance/Absence Types — control which absences apply to which employee populations
3. Configure Absence Counting Rules: link to processing class, counting class, deduction rules
4. Define Absence Quota Types (IT2006): statutory entitlements (annual leave days, sick days per year)
5. Configure Quota Generation Rules: base entitlement, pro-ration, carry-forward, max balance caps
6. Define Absence Valuation: configure wage type reduction rules for paid/unpaid absences in payroll

4.6 Payroll Posting & Finance Integration (FI/CO)

1. Configure Symbolic Accounts: abstract payroll posting categories (salaries, taxes, SI employer)
2. Define Account Determination (T030): map symbolic accounts → GL accounts per company code
3. Configure Posting Variants: control document date, posting date, text fields for FI documents
4. Set up Cost Center Assignment: derive cost center from IT0001 org assignment or IT0027 cost distribution
5. Execute FI Posting Simulation (PC00_M99_CIPE) before first live run to validate GL mappings
6. Configure Payment Methods and DME (Data Medium Exchange) for bank file generation

CHAPTER 5 — Payroll Control Center (PCC) & Operations

Audience: Payroll Operations / Functional Consultant | Phase: Realize + Run

5.1 PCC Configuration Workbench (PYC_CONF_WB)

1. Configure Validation Rule Types: define which infotype fields are checked (extend with customer-specific fields)
2. Configure KPI Types: define payroll health metrics (e.g. negative net pay count, missing TFN count)
3. Configure Analytics Designer Types: define chart types and data sources for PCC dashboards
4. Configure Action Types: Solutions (auto-fix actions) and Step Links (navigation shortcuts)
5. Configure Step Types, Activity Types, and Activity List Types
6. Use Where-Used List to identify dependencies before modifying imported configuration objects

5.2 Validation Rules, Policies & Processes

1. Configure Validation Rules: logic conditions that flag payroll errors (e.g. gross > 3× prior month)
2. Manage Policies: group validation rules into policies per payroll area/country
3. Manage Processes: assign policies + analytics to specific payroll periods (create payroll run blueprint)
4. Configure Activity Lists: sequential activities for each process stage (Pre-Payroll, Calculation, Post-Payroll)
5. Configure Steps: define individual tasks within activities (e.g. Run RPCALCX0, Review variance report)
6. Maintain Team Configuration: assign Payroll Administrators in T526, activate team configuration switch

5.3 Pay Statement Configuration

1. Configure Payslip form using HRFORMS editor (HRFORMS transaction) — define layout, wage type groupings
2. Enable Pay Statement service in Payroll Unified Configuration → System Config → Portlets
3. Enable Custom Key Figures for Pay Statement Direct Integration (display calculated figures)
4. Enable Additional Security for Pay Statement (prevents unauthorized access via ESS)
5. Configure Pay Statement variants (e.g. PCC_PAYSLIP_US) for country-specific layouts
6. Activate ESS Pay Statement service in SICF and configure PFCG roles for employee self-service access

5.4 Payroll Unified Configuration (Admin Center)

1. Navigate to Admin Center → Tools → Payroll Unified Configuration
2. Add country/region and configure System Configuration (link to ECP backend)
3. Configure Portlets: Pay Statement, Tax Forms, YTD Summary for employee-facing views
4. Configure Payroll Tasks: define which tasks trigger Payroll Data Maintenance Task workflow
5. Trigger Payroll Data Maintenance Task Types: New Hire, Hire Date Change, Job Information event reasons
6. Set Role Based Permissions for Payroll Unified Configuration (Edit vs View per role)

5.5 Country-Specific Payroll Configuration

1. United States: Concurrent Employment V_T77S0 (CCURE/PAYUS); Third-Party Remittance process types
2. United Kingdom: Starter Checklist UK_STARTER_CHECKLIST → T77SFEC_ONB_SEL; Multiple Employment IT0121/IT0065
3. Germany: ELSTER e-filing via CPI; refer to Tax Integration for Germany Implementation Guide
4. India: Form 12BB and Income Tax Declaration (ITD) via Payroll System Configuration in Admin Center
5. Canada / Mexico: Concurrent Employment activation V_T77S0 (CCURE/PAYCA or CCURE/PAYMX)
6. APAC (AU/SG/JP/MY): Country-specific molga activation, STP Phase 2 (AU), CPF (SG), Year-End Adjustment (JP)

5.6 Payroll Run Execution & Monitoring

1. Execute Payroll Driver (country-specific RPCALCX0) — simulation first, then live run
2. Monitor payroll run via PCC Cockpit: track employee count, error count, processing status
3. Review payroll log: analyze fatal errors vs warnings; use PC_PAYRESULT to inspect cluster results
4. Execute Payroll Journal (RPCLJNXX) and Audit Report (RPCAUDXX) for run validation
5. Execute Remuneration Statements (RPCEDTXX) and distribute pay statements to employees
6. Lock payroll results (Exit Payroll status in PA03) before FI posting and bank file generation

CHAPTER 6 — Testing, Go-Live & Continuous Improvement

Audience: Project Manager + All Tracks | Phase: Deploy + Run

6.1 Unit Testing Strategy

1. Unit Test: Organizational Structure — verify PA/PSA assignments, payroll area derivation
2. Unit Test: Wage Type Calculations — test each wage type with boundary values, zero, and negative scenarios
3. Unit Test: Tax & Statutory Deductions — validate country-specific calculations against official tables
4. Unit Test: EC → ECP Replication — trigger payload; verify all infotypes populated correctly via SLG1
5. Unit Test: PCC Validation Rules — verify each rule fires correctly on known error conditions
6. Document unit test results with screenshots; log all defects in defect tracker with root cause

6.2 Integration Testing & Parallel Payroll

1. Integration Test: EC → ECP Master Data flow — hire-to-pay end-to-end for new employee
2. Integration Test: Time Off → Absence → Payroll Deduction — full flow from EC Time to net pay
3. Integration Test: Payroll → FI Posting → GL Accounts — verify posting documents and cost center distribution
4. Integration Test: Payment File → Bank Format — validate DME output against bank specification
5. Parallel Payroll: run new ECP payroll alongside legacy system for 2–3 cycles; reconcile results
6. Sign off on parallel run: Finance + HR + External Audit approval before switching off legacy

6.3 User Acceptance Testing (UAT)

1. UAT: Payroll Administrator — complete payroll cycle in PCC from data lock → calculation → posting
2. UAT: HR Team — maintain master data in EC and verify replication to ECP within SLA
3. UAT: Finance Team — validate GL postings, cost center distribution, and bank payment files
4. UAT: Employee Self-Service — access pay statement, view year-end tax form, update bank details
5. UAT: Manager Self-Service — review team pay data, approve off-cycle payments
6. Issue resolution: triage UAT defects by severity (Critical/High/Medium/Low); close all Critical before go-live

6.4 Security, Data Privacy & Compliance Validation

1. Validate SAML 2.0 SSO: test login flow from EC → ECP; verify session tokens and timeout behavior
2. Validate OAuth 2.0: test API calls with EC_ADM_OAUTH and EC_ESS_OAUTH client credentials
3. Validate PFCG role assignments: test each role cannot access unauthorized transactions or data
4. GDPR/Data Privacy: verify audit logs, data masking rules, and retention periods are configured
5. Certificate expiration monitoring: validate SSF_ALERT_CERTEXPIRE report fires alerts correctly
6. Penetration test checklist: Clickjacking protection, HTTPS enforce, SCIM endpoint security

6.5 Go-Live Readiness & Cutover

1. Cutover Plan: define data migration sequence — org data → master data → open items → balances
2. Go-live Checklist: verify all SICF services active, OData services registered, RFC connections green
3. Initial Load: trigger full EC → ECP employee data load; reconcile headcount EC vs ECP
4. Validate Payroll Control Record: set to Released for Payroll status for go-live payroll period
5. Hypercare Support Plan: define 4-week hypercare support roster, escalation path, SLA thresholds
6. Knowledge Transfer: handover configuration workbook, runbooks, and training materials to support team

6.6 AMS, Continuous Improvement & Future Roadmap

1. AMS Operations: incident management SLA (P1=4hr, P2=8hr, P3=2day), change management process
2. Quarterly Release Updates: SAP ECP quarterly patch review — assess impact on payroll schema and legal changes
3. Annual Statutory Updates: tax tables, social insurance rates, minimum wage — update before new tax year
4. PCC Enhancement Cycle: review validation rules effectiveness quarterly; add new rules for emerging risks
5. Country Expansion: replicate this 6-chapter framework for each new country rollout (see APAC/GCC KDS workbooks)
6. Emerging Capabilities: Continuous Payroll, Global Payroll Core, AI-driven anomaly detection in PCC

🗺️ Curriculum Design Mapping: 6 Chapters → 6 Course Modules

Total Structure: 6 Chapters × 6 Topics × 6 Substeps = 216 configuration actions — complete coverage of SAP ECP from provisioning to AMS.